Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/38f1d6ad415afa93ec71a17f6986ea3010e53a34.roa
File:                     38f1d6ad415afa93ec71a17f6986ea3010e53a34.roa (raw, json)
Hash identifier:          Y0BCEHb/b1RprtRVbpzk27QLbm0b6iNItlHZOlkRysg=
Subject key identifier:   E5:CB:1E:2A:58:7A:17:EF:9D:65:37:27:B6:A1:12:AE:EA:21:47:F3
Certificate issuer:       /CN=2014fe312f512b7a037dbccfd3a2ed388671449a
Certificate serial:       0D47AC
Authority key identifier: 7D:34:3C:49:9B:65:2F:11:F3:02:18:BF:DD:B0:28:38:87:5F:A4:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2014fe312f512b7a037dbccfd3a2ed388671449a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/38f1d6ad415afa93ec71a17f6986ea3010e53a34.roa
Signing time:             Wed 24 Mar 2021 14:38:38 +0000
ROA not before:           Wed 24 Mar 2021 14:38:37 +0000
ROA not after:            Tue 24 Mar 2026 14:38:37 +0000
asID:                     264668
IP address blocks:        2803:6420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870316 (0xd47ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2014fe312f512b7a037dbccfd3a2ed388671449a
        Validity
            Not Before: Mar 24 14:38:37 2021 GMT
            Not After : Mar 24 14:38:37 2026 GMT
        Subject: CN=38f1d6ad415afa93ec71a17f6986ea3010e53a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:a9:74:21:8d:20:72:56:fb:33:b0:32:c1:
                    4b:d2:45:9b:45:af:94:b9:17:8c:f7:f7:08:05:95:
                    90:58:db:27:0d:53:43:f0:2f:7a:de:8f:f8:9f:b9:
                    73:f3:62:f9:71:cf:09:53:b9:f7:77:be:68:ad:9b:
                    dc:c1:57:6e:dd:f4:86:cf:6a:d9:2d:18:7c:b1:c4:
                    04:04:fa:c0:92:ac:0b:ac:4e:5f:82:e6:66:10:51:
                    d5:9e:b9:7d:8f:34:5f:ba:09:9b:6e:0b:d7:89:2d:
                    90:a1:b3:da:6a:09:3e:2a:8d:7f:d5:b2:13:48:1f:
                    7e:e8:60:1e:1e:cd:e6:09:37:c8:e8:74:eb:78:a5:
                    d7:20:17:51:b2:f7:36:10:45:85:ce:1b:2e:83:10:
                    8b:6c:73:4e:55:a4:f9:fd:7f:48:49:de:a8:22:b5:
                    cf:a4:61:1b:cb:f6:11:8c:2c:bc:f4:7d:96:8f:51:
                    d4:2f:26:0c:ca:12:cf:1d:c6:c8:88:82:dc:69:c2:
                    f0:4c:77:b8:9f:62:1f:e5:f3:32:08:84:4c:a2:fe:
                    38:9e:82:80:88:78:d5:df:b1:d2:b3:31:14:2c:f2:
                    8c:9e:6b:2b:4f:3d:a0:a4:c3:d8:af:ac:cd:01:75:
                    04:6d:ea:64:34:05:80:da:de:d1:5f:0b:9b:4a:51:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CB:1E:2A:58:7A:17:EF:9D:65:37:27:B6:A1:12:AE:EA:21:47:F3
            X509v3 Authority Key Identifier:
                keyid:7D:34:3C:49:9B:65:2F:11:F3:02:18:BF:DD:B0:28:38:87:5F:A4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2014fe312f512b7a037dbccfd3a2ed388671449a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/38f1d6ad415afa93ec71a17f6986ea3010e53a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/2014fe312f512b7a037dbccfd3a2ed388671449a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6420::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:0f:80:a1:02:3d:ff:66:a2:2f:e9:8b:7a:86:c7:46:db:fb:
         e5:5f:c0:79:5b:89:4c:52:5c:55:c7:08:78:63:67:a3:7c:5e:
         eb:9b:4c:de:e0:f2:b0:bc:8a:3b:8f:92:b9:92:10:11:ff:3b:
         84:bc:c9:ae:a4:3e:ee:75:52:b9:02:1c:e5:f1:e4:3e:4f:e9:
         7d:96:57:c8:74:ae:fe:dd:54:02:9f:ac:6c:c7:25:b0:0a:c8:
         5e:9d:75:2f:e1:9f:00:32:a4:51:50:c1:21:0f:2b:c9:ea:71:
         ce:5f:d8:58:b3:0f:80:4d:eb:5f:44:59:79:69:47:da:b4:50:
         1e:24:21:4c:c5:42:56:55:62:8b:1b:58:a4:18:d8:5e:54:b7:
         2a:a3:a9:5c:db:e9:e9:cc:9e:0e:c0:60:ca:50:b3:01:04:f6:
         ec:b3:0d:9e:86:c5:24:12:f4:14:3b:40:ba:47:a5:47:cf:f7:
         52:dc:d2:18:19:39:05:41:00:2c:f1:1d:ee:02:eb:91:aa:14:
         1d:43:5c:73:6a:91:6c:c7:48:ae:fa:bc:64:41:71:36:ce:df:
         7c:7d:99:fa:1b:60:63:da:7e:c3:6f:d9:63:83:a5:1d:ae:2a:
         9e:c2:35:ee:da:23:12:7c:cf:d8:21:5e:cb:c9:7a:65:85:0d:
         ee:e9:1d:0a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDUesMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIw
MTRmZTMxMmY1MTJiN2EwMzdkYmNjZmQzYTJlZDM4ODY3MTQ0OWEwHhcNMjEwMzI0
MTQzODM3WhcNMjYwMzI0MTQzODM3WjAzMTEwLwYDVQQDEygzOGYxZDZhZDQxNWFm
YTkzZWM3MWExN2Y2OTg2ZWEzMDEwZTUzYTM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxhCpdCGNIHJW+zOwMsFL0kWbRa+UuReM9/cIBZWQWNsnDVND
8C963o/4n7lz82L5cc8JU7n3d75orZvcwVdu3fSGz2rZLRh8scQEBPrAkqwLrE5f
guZmEFHVnrl9jzRfugmbbgvXiS2QobPaagk+Ko1/1bITSB9+6GAeHs3mCTfI6HTr
eKXXIBdRsvc2EEWFzhsugxCLbHNOVaT5/X9ISd6oIrXPpGEby/YRjCy89H2Wj1HU
LyYMyhLPHcbIiILcacLwTHe4n2If5fMyCIRMov44noKAiHjV37HSszEULPKMnmsr
Tz2gpMPYr6zNAXUEbepkNAWA2t7RXwubSlH4TwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOXLHipYehfvnWU3J7ahEq7qIUfzMB8GA1UdIwQYMBaAFH00PEmbZS8R8wIY
v92wKDiHX6RaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjAxNGZl
MzEyZjUxMmI3YTAzN2RiY2NmZDNhMmVkMzg4NjcxNDQ5YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTZiZDZkZWYtODVhNS00MWQ4LThkMjctNWVjMzk4
NGRjNzJlLzM4ZjFkNmFkNDE1YWZhOTNlYzcxYTE3ZjY5ODZlYTMwMTBlNTNhMzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NmJkNmRlZi04NWE1LTQxZDgtOGQyNy01ZWMz
OTg0ZGM3MmUvMjAxNGZlMzEyZjUxMmI3YTAzN2RiY2NmZDNhMmVkMzg4NjcxNDQ5
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDZCAwDQYJKoZIhvcNAQELBQADggEBAD4PgKECPf9moi/p
i3qGx0bb++VfwHlbiUxSXFXHCHhjZ6N8XuubTN7g8rC8ijuPkrmSEBH/O4S8ya6k
Pu51UrkCHOXx5D5P6X2WV8h0rv7dVAKfrGzHJbAKyF6ddS/hnwAypFFQwSEPK8nq
cc5f2FizD4BN619EWXlpR9q0UB4kIUzFQlZVYosbWKQY2F5UtyqjqVzb6enMng7A
YMpQswEE9uyzDZ6GxSQS9BQ7QLpHpUfP91Lc0hgZOQVBACzxHe4C65GqFB1DXHNq
kWzHSK76vGRBcTbO33x9mfobYGPafsNv2WODpR2uKp7CNe7aIxJ8z9ghXsvJemWF
De7pHQo=
-----END CERTIFICATE-----